The emails were sent from a suspicious, non-University address, they appeared to be messages from Google Docs that used the names of people familiar with the recipient to make the message seem credible.